ACTIVELY EXPLOITED VULNERABILITIES CVE-2026-8452 — Citrix NetScaler ADC & Gateway (CVSS 8.8): Memory overflow vulnerability added to CISA KEV on August 26. FCEB agencies must patch by August 29, 2026. Actively exploited in the wild. CVE-2026-55040 + CVE-2026-63520 — Microsoft SharePoint RCE Chain: JWT token authentication bypass (CVE-2026-55040) chained with Business Connectivity Services RCE (CVE-2026-63520). Public PoCs released; active exploitation began within 24 hours. C

ACTIVELY EXPLOITED VULNERABILITIES CVE-2026-33824 — Microsoft IKE Service Extensions Double Free Vulnerability: Critical RCE flaw in Windows Internet Key Exchange that allows unauthenticated remote code execution with no user interaction. Fixed in April 2026 Patch Tuesday. Added to CISA KEV on August 18, 2026. FCEB agencies must remediate per BOD 22-01. CVE-2026-55040 — Microsoft SharePoint Weak Authentication Vulnerability: Allows authentication bypass over a network connect

ACTIVELY EXPLOITED VULNERABILITIES CISA KEV (Aug 11): CVE-2026-20349 — Cisco Secure Firewall ASA/FTD Heap Inspection vulnerability; CVE-2026-68820 — Microsoft Windows Ancillary Function Driver for WinSock Use-After-Free LPE (FCEB patch deadline: August 25, 2026); CVE-2026-72898 — Metabase SQL Injection vulnerability. All three have confirmed active exploitation. CISA KEV (Aug 3): CVE-2026-18577 — N-able N-central Authentication Bypass Using an Alternate Path or Channel vulner